Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133312e3130302e3135322e302f32342d3234203d3e203631363339.roa
File:                     3133312e3130302e3135322e302f32342d3234203d3e203631363339.roa (raw, json)
Hash identifier:          fMEMOn7giW+B2MuzEBqS24NL/GLxdinPlWApZoVhqZY=
Subject key identifier:   3F:47:96:2A:0B:7A:C3:9E:28:31:97:73:36:50:C4:41:41:57:6F:77
Certificate issuer:       /CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
Certificate serial:       2BE499A725C3785157014A1CA58C2821E96C8D44
Authority key identifier: 0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133312e3130302e3135322e302f32342d3234203d3e203631363339.roa
Signing time:             Wed 03 Apr 2024 18:32:16 +0000
ROA not before:           Wed 03 Apr 2024 18:27:16 +0000
ROA not after:            Wed 02 Apr 2025 18:32:16 +0000
asID:                     61639
IP address blocks:        131.100.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl
                          rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e4:99:a7:25:c3:78:51:57:01:4a:1c:a5:8c:28:21:e9:6c:8d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
        Validity
            Not Before: Apr  3 18:27:16 2024 GMT
            Not After : Apr  2 18:32:16 2025 GMT
        Subject: CN=3F47962A0B7AC39E283197733650C44141576F77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:9b:5d:49:eb:07:5b:2f:24:bd:6b:79:dc:
                    97:dd:13:b4:55:b9:35:f8:f1:fe:68:b4:b7:87:39:
                    6a:da:65:84:c5:45:46:a7:19:f6:ff:6a:6b:7b:98:
                    bc:a8:d2:b5:71:45:3f:e8:eb:d4:e6:7c:c9:ea:6c:
                    cf:f8:40:27:9d:67:b3:d8:86:16:c2:65:9b:16:68:
                    34:96:5d:6a:51:90:7d:cd:c4:69:4c:44:da:21:8a:
                    fa:1b:9f:80:aa:52:b0:db:fc:5d:9f:d5:0b:b4:fc:
                    69:1f:dc:05:6b:de:72:44:11:19:de:3a:bc:d6:08:
                    23:5c:80:94:ef:cc:04:ae:fb:81:f4:aa:02:b0:d9:
                    4d:bc:2b:f8:99:e9:1d:df:e2:b3:e7:d2:00:ec:42:
                    c6:e3:db:cc:af:2f:2d:e9:ee:db:d5:31:b6:76:8f:
                    75:09:fa:15:fd:db:e2:b1:76:e5:a7:c2:f9:34:80:
                    3f:85:8d:9a:72:b2:91:ce:ef:c1:80:87:b2:ad:18:
                    90:02:60:66:5a:c7:b8:82:46:e9:06:ee:95:3c:18:
                    0b:34:c0:0c:f9:bb:e4:6e:73:b8:1f:20:d2:aa:b8:
                    62:2a:f3:27:36:6a:30:84:a1:e3:8f:b9:54:b7:87:
                    a0:1b:c2:f4:20:8a:be:48:eb:36:af:5c:d3:cb:c3:
                    48:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:47:96:2A:0B:7A:C3:9E:28:31:97:73:36:50:C4:41:41:57:6F:77
            X509v3 Authority Key Identifier:
                keyid:0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133312e3130302e3135322e302f32342d3234203d3e203631363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:4d:f5:de:45:3e:ab:25:8e:3a:e5:61:8a:5d:a2:e7:46:e0:
         a6:86:21:78:8e:f7:c5:05:bd:3c:c4:4d:8d:98:eb:2c:a2:22:
         a9:7d:e3:5c:1a:2c:3d:46:c1:09:bb:10:28:ba:9e:9e:91:5a:
         66:19:46:0f:ae:c6:96:1f:5c:00:71:b9:01:b4:96:88:9a:15:
         fe:a5:44:b5:ec:8f:c6:7f:ae:06:32:4d:ca:9a:c4:8c:b1:c7:
         04:bc:97:5b:a2:0c:7c:ee:e1:da:a8:59:50:44:7d:16:da:e2:
         76:23:9a:80:a8:a1:d1:cb:4b:a8:dd:69:6f:37:16:d2:4f:bf:
         ee:40:52:ad:31:ab:51:a7:c3:de:52:4e:96:5d:6f:1c:59:f6:
         7a:12:bb:12:30:a0:29:e3:9b:c5:2b:5d:12:cc:ff:94:ac:7a:
         3e:ec:25:9a:13:33:a1:ed:18:9e:b0:3b:88:2e:37:46:f5:08:
         43:37:d0:0f:9a:ed:0a:a5:7a:13:c6:cf:75:81:f6:6d:60:4d:
         b9:56:2a:f8:18:05:1a:20:39:70:70:b6:b5:e9:39:72:c7:0a:
         1d:c3:09:13:f1:3f:08:40:14:bf:bb:3f:4a:6c:4e:cd:70:2c:
         08:be:7f:b0:22:bf:7c:54:2a:f3:6b:40:45:6d:c5:e8:67:7c:
         2d:d1:3b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:51 2024 by rpki-client on console-fra.rpki-client.org